$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.mft File: a99940f3-ed95-444a-a18b-6d4d902f65bd.mft (raw, json) Hash identifier: qXjqNwyhb7W9B0lRBbtwUsTpOWrmTrr3MZz6gNOATkQ= Subject key identifier: D2:EF:3D:15:A9:D3:19:CA:E2:31:E3:7A:4A:11:9D:EF:06:E6:C0:6E Authority key identifier: 7F:9E:C8:8D:B1:5F:32:57:D1:3F:F1:02:1A:28:DA:D6:86:3C:54:37 Certificate issuer: /CN=a99940f3-ed95-444a-a18b-6d4d902f65bd Certificate serial: 010D0C9F4328584D0682EA1AF9262A9485203680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.mft Manifest number: 010D0C9F4328584B880D2253A526F32E53D327CC Signing time: Sun 01 Mar 2026 16:00:08 +0000 Manifest this update: Sun 01 Mar 2026 16:00:08 +0000 Manifest next update: Tue 03 Mar 2026 16:00:00 +0000 Files and hashes: 1: 0ef92f58-c6e6-3660-bea0-c5112bf2babf.roa (hash: F87BORUf/LtSx3zsMvbHNTPF/EMPGNG85Y8RMVJGOEU=) 2: a99940f3-ed95-444a-a18b-6d4d902f65bd.crl (hash: kMSEDz+VB39zb5RTObBCOgQ57zgxkpmLmN1Wt9SMaq8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:82:ea:1a:f9:26:2a:94:85:20:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a99940f3-ed95-444a-a18b-6d4d902f65bd Validity Not Before: Mar 1 16:00:08 2026 GMT Not After : Mar 3 16:00:00 2026 GMT Subject: CN=d2d87339-0bd7-4529-9809-362f51b3da5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f3:de:66:1a:59:5e:2f:f2:30:78:c6:6c:06: c7:13:ff:f5:72:d7:29:20:79:9d:bd:95:e8:c6:43: 9c:ff:86:94:d0:09:85:91:a7:07:e4:95:54:15:a1: 70:35:13:3a:89:10:3b:65:3b:33:20:bf:24:82:75: dc:4a:8a:71:34:24:28:18:b0:b5:b1:2b:86:4e:6f: 22:36:72:40:d3:5d:4c:0d:95:2f:97:d4:cb:74:5f: 0b:c1:48:ee:c6:89:aa:98:39:d5:03:e7:bc:93:75: e5:0d:34:a1:b6:2e:1f:5b:a9:3f:b2:fb:c0:6b:75: bb:dd:cf:c3:e9:bb:0b:b9:98:01:80:9e:b3:4e:a9: a1:a5:08:90:6f:c2:3a:aa:9c:54:81:df:de:b1:a5: 10:c2:3d:59:57:11:f6:b2:c0:6a:5e:a7:ec:91:15: a3:d8:34:e3:b3:5f:98:a9:31:0a:7e:d1:af:94:57: 42:86:52:79:b8:50:f3:91:28:93:e0:fa:a5:fc:50: ea:3b:08:3f:be:d2:e5:2a:ba:ee:56:a3:d0:20:bb: 50:b6:7b:a5:10:ee:dd:3f:1b:65:59:c1:fb:78:1f: 32:3e:5a:75:be:ec:03:1f:d3:3e:84:5d:17:09:09: d0:ac:f9:33:5e:41:86:2e:42:58:8e:e4:00:cc:5d: 5b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EF:3D:15:A9:D3:19:CA:E2:31:E3:7A:4A:11:9D:EF:06:E6:C0:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.crl X509v3 Authority Key Identifier: keyid:7F:9E:C8:8D:B1:5F:32:57:D1:3F:F1:02:1A:28:DA:D6:86:3C:54:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:78:7a:1e:43:1b:35:55:05:9f:51:c6:42:66:35:e6:75:0c: 1f:a7:be:1d:79:71:38:a0:43:1e:b2:d6:4a:2c:98:31:d4:19: dd:02:d6:91:b0:2b:c0:05:ce:a8:56:28:19:95:cf:5b:9f:42: 1e:50:a1:85:87:56:8c:70:63:c4:06:d6:ae:51:8a:e8:8e:6c: a5:60:50:7e:cc:80:15:9d:8d:9e:5d:dd:8f:96:d2:8a:ca:69: d6:f1:46:11:9b:b6:95:f8:32:41:bb:8d:38:e5:5b:12:a2:68: 15:a7:00:da:b7:86:d5:c9:1d:fd:33:26:d0:98:c6:17:c5:c4: 46:30:dd:37:1e:99:c8:93:86:32:40:b6:48:96:0e:18:ff:92: e8:da:8d:22:01:5e:95:37:b0:c8:1e:37:d2:a5:7b:99:6c:33: 8d:53:86:65:c2:da:e6:08:e9:9a:1d:ab:94:78:78:4e:d2:1d: 6b:38:fc:4a:ba:60:bc:28:dd:c7:c3:34:ce:b5:e0:5d:55:9b: be:dc:4b:13:69:9e:8e:3c:13:93:bb:aa:57:d9:a6:85:34:3a: f7:f7:0d:c2:76:73:06:ef:a8:2f:83:44:1d:30:14:e5:31:f6: c9:44:e7:fe:90:0a:3f:f6:01:59:1e:97:fa:87:53:52:a8:48: 8e:a2:3b:a8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0Gguoa+SYqlIUgNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk5OTQwZjMtZWQ5NS00NDRhLWExOGItNmQ0ZDkwMmY2 NWJkMB4XDTI2MDMwMTE2MDAwOFoXDTI2MDMwMzE2MDAwMFowLzEtMCsGA1UEAxMk ZDJkODczMzktMGJkNy00NTI5LTk4MDktMzYyZjUxYjNkYTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PPeZhpZXi/yMHjGbAbHE//1ctcpIHmdvZXo xkOc/4aU0AmFkacH5JVUFaFwNRM6iRA7ZTszIL8kgnXcSopxNCQoGLC1sSuGTm8i NnJA011MDZUvl9TLdF8LwUjuxomqmDnVA+e8k3XlDTShti4fW6k/svvAa3W73c/D 6bsLuZgBgJ6zTqmhpQiQb8I6qpxUgd/esaUQwj1ZVxH2ssBqXqfskRWj2DTjs1+Y qTEKftGvlFdChlJ5uFDzkSiT4Pql/FDqOwg/vtLlKrruVqPQILtQtnulEO7dPxtl WcH7eB8yPlp1vuwDH9M+hF0XCQnQrPkzXkGGLkJYjuQAzF1bowIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNLvPRWp0xnK4jHjekoRne8G5sBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTk5 NDBmMy1lZDk1LTQ0NGEtYTE4Yi02ZDRkOTAyZjY1YmQvYTk5OTQwZjMtZWQ5NS00 NDRhLWExOGItNmQ0ZDkwMmY2NWJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTk5OTQwZjMtZWQ5NS00NDRhLWEx OGItNmQ0ZDkwMmY2NWJkL2E5OTk0MGYzLWVkOTUtNDQ0YS1hMThiLTZkNGQ5MDJm NjViZC5jcmwwHwYDVR0jBBgwFoAUf57IjbFfMlfRP/ECGija1oY8VDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTk5NDBmMy1lZDk1LTQ0NGEtYTE4Yi02ZDRk OTAyZjY1YmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAreHoeQxs1VQWfUcZCZjXm dQwfp74deXE4oEMestZKLJgx1BndAtaRsCvABc6oVigZlc9bn0IeUKGFh1aMcGPE BtauUYrojmylYFB+zIAVnY2eXd2PltKKymnW8UYRm7aV+DJBu4045VsSomgVpwDa t4bVyR39MybQmMYXxcRGMN03HpnIk4YyQLZIlg4Y/5Lo2o0iAV6VN7DIHjfSpXuZ bDONU4ZlwtrmCOmaHauUeHhO0h1rOPxKumC8KN3HwzTOteBdVZu+3EsTaZ6OPBOT u6pX2aaFNDr39w3CdnMG76gvg0QdMBTlMfbJROf+kAo/9gFZHpf6h1NSqEiOojuo -----END CERTIFICATE-----Generated at Sun Mar 1 20:32:02 2026 by rpki-client